9904 matches found
SWC-109 Uninitialized Storage Pointer
Lines of code Vulnerability details Impact Uninitialized storage variables can point to unexpected storage locations. Proof of Concept // Exploitable Vulnerability MemoryPointer callData; Tools Used github Recommended Mitigation Steps // Initialize variable "callData" or set the storage attribute...
CVE-2022-45541
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...
Design/Logic Flaw
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...
Cookie without “Secure “ and “ HttpOnly ” flag attribute
Description HttpOnly and Secure attribute is not set for session cookies in the application. Proof of Concept https://drive.google.com/file/d/1ZAanmAbOn-jSf6ZMS5JIQKUzJ78fUrea/view?usp=sharing...
GHSA-HM7F-RQ7Q-J9XP @builder.io/qwik vulnerable to Cross-site Scripting
@builder.io/qwik prior to version 0.16.2 is vulnerable to cross-site scripting due to attribute names and the class attribute values not being properly handled...
CVE-2022-45541
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...
CVE-2022-45541
CVE-2022-45541 affects EyouCMS
PT-2023-8809 · Oracle +1 · Oracle Ldap Attribute Handler +2
Name of the Vulnerable Software and Affected Versions: Broadcom Symantec Identity Manager and Symantec Identity Governance and Administration affected versions not specified Description: The issue is related to the Oracle LDAP Attribute Handler component, which fails to protect the web page...
CVE-2022-45541
EyouCMS = 1.6.0 was discovered a reflected-XSS in the article attribute editor component in POST value "value" if the value contains a non-integer char...
PT-2023-16248
Name of the Vulnerable Software and Affected Versions @builder.io/qwik versions prior to 0.16.2 @builder.io/qwik versions prior to 0.1.0-beta5 Description The issue is related to Cross-site Scripting XSS due to improper handling of attribute names and the class attribute values. Recommendations F...
ALPINE-CVE-2023-22741
Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP lacks both message length and attributes length checks when it handles STUN packets, leading to controllable heap-over-flow. For example, in stunparseattribute, after ...
Sofia-SIP 缓冲区错误漏洞
Sofia-SIP is an open source SIP user agent library from the individual developers of freeswitch that conforms to the IETF RFC3261 specification. A buffer error vulnerability exists in Sofia-SIP that stems from a lack of message length and attribute length checks when processing STUN packets...
AZL-13063 CVE-2022-41861 affecting package freeradius for versions less than 3.2.3-1
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
DEBIAN-CVE-2022-41861
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
CVE-2022-41861
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
ALPINE-CVE-2022-41861
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
Design/Logic Flaw
A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash...
UBUNTU-CVE-2022-23521
Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a .gitattributes file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this...
GSD-2023-1000494 fs/ntfs3: Add overflow check for attribute size
fs/ntfs3: Add overflow check for attribute size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit...
uTubeVideo Gallery < 2.0.8 - Contributor+ Stored XSS
The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. PoC utubevideo view='panel' id='"...